<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
  <title>NSERC Workshop on Malware Analysis and Fingerprinting</title>
  <meta http-equiv="Content-Type"
 content="text/html; charset=iso-8859-1" />
  <link href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/style.css" rel="stylesheet" type="text/css" />
</head>
<body>
<center>
<div id="central"><a href="index.htm">
<div id="header"></div>
</a>
<ul id="navlist">
  <li><a id="n1" href="index.htm"><span>Home</span></a></li>
  <li><a id="n2" href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/en/speakers.html"><span>Speakers</span></a></li>
  <li><a id="n3" href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/en/program.html"><span>Program</span></a></li>
  <li><a id="n5" href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/en/committee.html"><span>Committee</span></a></li>
  <li><a id="n6" href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/en/venue.html"><span>Venue</span></a></li>
  <li><a id="n7" href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/en/hotel.html"><span>Hotel</span></a></li>
  <li><a id="n8" href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/en/travel.html"><span>Travel</span></a></li>
</ul>
<div style="top: 21px;" id="content">
<div align="right">
<p><a href="http://www.ciise.concordia.ca/newsandevents/2011/NSERCWorkshop/fr/index.htm">&nbsp;</a></p>
</div>
<div align="center">
<table
 style="width: 90%; text-align: left; margin-left: auto; margin-right: auto;"
 border="0" cellpadding="0" cellspacing="0">
  <tbody>
    <tr>
      <td style="width: 710px;">
      <h1><br />
      </h1>
      </td>
    </tr>
    <tr>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td style="vertical-align: top; width: 80%;"><span
 style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">This
workshop will bring together key Canadian researchers in the field of
assembly and source code analysis for
reverse engineering. It will allow them to present and
discuss with the participating government and industry representatives
the state&#8208;of&#8208;the&#8208;art research
results and gaps in this domain. A keynote presentation will be givien by Dr. Jose Nazario, Senior Manager of Security Research with Arbor Networks. In
addition, this workshop will allow the government and industry
representatives to express their needs in the area of assembly and
source code analysis. This will serve to shape and prioritize the
research and development efforts that will ultimately lead to efficient
and practical tools through joint research initiatives. The themes to
be covered during the workshop include the following two reverse
engineering capability gaps:</span></span><br />
      <br />
      <p style="width: 635px;"><span style="color: rgb(0, 0, 0);"
 lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">1.
&nbsp;</span></span><span style="font-style: italic;">Automated
analysis and comparison of assembly code</span><span
 style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);"><br />
      </span></span></p>
      <div style="margin-left: 40px;"><span style="color: rgb(0, 0, 0);"
 lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">To
accelerate the reverse engineering process, new analysis techniques are
needed to </span></span><span style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">automatically
identify the shared code between&nbsp; unknown assembly code and </span></span><span
 style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">previously
analyzed samples.</span></span></div>
      <br />
      <p style="width: 635px;"><span style="color: rgb(0, 0, 0);"
 lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">2.
      <span style="font-style: italic;">&nbsp;Integration
of
information
resources for correlation</span><br />
      </span></span></p>
      <div style="margin-left: 40px;"><span style="color: rgb(0, 0, 0);"
 lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">Existing
sources of software analyzed at the assembly code level are stored in
several </span></span><span style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">unstructured
collections and are primarily designed to be read by humans. Their
manual </span></span><span style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">consultation
is ineffective. Therefore, they need to be indexed into an integrated
and </span></span><span style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">machine&#8208;oriented
database on which analysis techniques can be applied. <br />
      <br />
      </span></span></div>
      <span style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">In
the longer term, bringing together researchers will increase
collaboration with the objective of reaching a critical mass. This
consolidation of expertise will
accelerate the progress in the field of assembly and source code
analysis and position Canada as a leader on
the international scene in this area. Also, meeting with
representatives from the government and the
industry will allow Canadian researchers to focus their work on solving
high&#8208;priority problems. This
in turn will help the government and industry to provide stimuli to
researchers and similarly excel in
their high&#8208;technology mandate.<br />
      <br />
      </span></span><span style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);"><br />
      <span style="color: rgb(0, 0, 0);" lang="FR-CA"><span
 style="font-weight: normal; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);" /></span></span></span></td>
    </tr>
  </tbody>
</table>
</div>
</div>
</div>
</center>
</body>
</html>
